Digest
Authentication for SIP Phones Setup

This chapter
provides information about digest authentication for SIP phones setup. For
additional information on how digest authentication works for phones that are
running SIP, see topics related to digest authentication.

When you enable digest
authentication for a phone,
Cisco Unified Communications
Manager challenges all requests except keepalive messages for phones
that are running SIP.
Cisco Unified Communications
Manager uses the digest credentials for the end user, as configured
in the
End User
Configuration window, to validate the credentials that the phone
offers.

If the phone
supports extension mobility,
Cisco Unified Communications
Manager uses the digest credentials for the extension mobility end
user, as configured in the
End User
Configuration window, when the extension mobility user logs in.

For
information about configuring digest authentication for non-Cisco phones that
are running SIP, refer to Appendix C in the
Administration Guide for Cisco
Unified Communications Manager.

Set Up SIP Phone Digest Authentication

The following procedure provides the tasks used to configure digest authentication for phones that are running SIP.

Procedure

Step 1

Configure the security profiles for phones that are running SIP; make sure that you check the Enable Digest Authentication check box.

Step 2

Apply a security profile to the phone that is running SIP.

Step 3

If you want to update the default setting, configure service parameters that are related to digest authentication; for example, configure the SIP Station Realm service parameter.

Step 4

Configure the digest credentials in the End User Configuration window.

Step 5

Choose the Digest User in the Phone Configuration window.

Choosing a digest user for these phones that are running SIP ensures that the digest credentials get included in the phone configuration file.

Step 6

On Cisco Unified IP Phones 7940G or 7960G (SIP only), enter the digest credentials that you configured in the End User Configuration window.

For information on how to enter the authentication name and password on the phone, refer to the Cisco Unified IP Phone Administrator Guide that supports this version of Cisco Unified Communications Manager.

Set Up Digest Authentication Service Parameters

You configure the SIP Realm for challenges to phones with the service parameter SIP Station Realm. At installation, Cisco Unified Communications Manager provides a default setting, ccmsipline. For additional information on the parameter, click the question mark or the parameter name link that displays in the Service Parameter Configuration window.

To update digest authentication service parameters, for example, the SIP Realm Station parameter, perform the following procedure: